Cyber Threat Intelligence (CTI) Analyst

Indigo IT LLC; Fort Bragg (NC); On-site; USD 95,000 - 150,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) with company match

Life & disability

FSA

PTO

Paid holidays

Education assistance

Training programs

Bonuses

Recognition programs

Job summary

Indigo IT LLC is seeking a Cyber Threat Intelligence Analyst to collect, analyze, and disseminate actionable intelligence supporting an Army contract. You will produce briefings for commanders and cyber leadership, and develop intelligence-driven detection objectives for Blue Team activities.

The role emphasizes collaboration with Purple Team, signature development, and threat hunting, leveraging MITRE ATT&CK and ATT&CK-aligned methodologies to strengthen defense postures.

Qualifications

• 5+ years experience performing Cyber Threat Intelligence analysis within a DoD, Intelligence Community, or federal cybersecurity environment.
• Strong understanding of nation-state and advanced persistent threat (APT) actors, malware analysis, and cyber threat reporting.
• Experience with threat intelligence platforms, SIEM technologies, detection engineering, and indicator management.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, STIX/TAXII, and common threat intelligence methodologies.
• Experience developing or validating detection signatures, YARA rules, Snort/Suricata signatures, or SIEM detection content is preferred.
• Excellent analytical, written, and verbal communication skills with experience producing executive and technical intelligence products.
• Active DoD Secret clearance with TS/SCI eligibility

Responsibilities

• Collect, analyze, and correlate cyber threat intelligence from classified and open-source reporting to identify emerging threats, adversary activity, and attack trends.
• Produce timely intelligence reports, threat assessments, and briefings for supported commanders, RCC, ARCYBER, and cybersecurity leadership.
• Provide actionable intelligence to support Blue Team detection engineering, threat hunting, and incident response activities.
• Partner with Purple Team personnel to develop intelligence-driven assessment objectives and adversary emulation scenarios.
• Develop, review, validate, and maintain detection signatures and indicators of compromise (IOCs), ensuring proper syntax, functionality, and minimal false positives before deployment.
• Support continuous improvement of enterprise detection capabilities by reviewing and refining signature content, detection logic, and threat indicators.
• Conduct signature development and testing within isolated environments prior to production implementation.
• Track adversary tactics, techniques, and procedures (TTPs) using MITRE ATT&CK and provide recommendations to strengthen defensive capabilities.
• Maintain awareness of emerging cyber threats and communicate relevant intelligence to stakeholders across the cybersecurity enterprise.

Skills

Cyber Threat Intelligence

DoD/Federal cybersecurity

Threat hunting

MITRE ATT&CK

Security clearance

Tools

Threat intel platforms

SIEM

Detection engineering

Job description

Location: Ft. Bragg, NC

Job Id:548

# of Openings:1

POSITION SUMMARY

Founded in 2001, Indigo IT is an award winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers’ technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. As a Veteran-Friendly employer, we are proudly partnered with the Virginia Values Veterans (V3) Program, and a recipient of the HIRE Vets Gold Medallion Award, which recognizes our commitment to recruiting our nation’s Veterans. Recognized on the Inc. 5000 list of America’s fastest growing companies in 2020 & 2021 and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today!

The Cyber Threat Intelligence (CTI) Analyst is responsible for collecting, analyzing, and disseminating actionable cyber threat intelligence to support an Army contract. This role provides intelligence-driven analysis that enhances threat detection, informs Purple Team assessments, prioritizes remediation efforts, and improves the organization's overall cyber defense posture.

Key Responsibilities

• Collect, analyze, and correlate cyber threat intelligence from classified and open-source reporting to identify emerging threats, adversary activity, and attack trends.
• Produce timely intelligence reports, threat assessments, and briefings for supported commanders, Regional Cyber Centers (RCC), ARCYBER, and cybersecurity leadership.
• Provide actionable intelligence to support Blue Team detection engineering, threat hunting, and incident response activities.
• Partner with Purple Team personnel to develop intelligence-driven assessment objectives and adversary emulation scenarios.
• Develop, review, validate, and maintain detection signatures and indicators of compromise (IOCs), ensuring proper syntax, functionality, and minimal false positives before deployment.
• Support continuous improvement of enterprise detection capabilities by reviewing and refining signature content, detection logic, and threat indicators.
• Conduct signature development and testing within isolated environments prior to production implementation.
• Track adversary tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK and provide recommendations to strengthen defensive capabilities.
• Maintain awareness of emerging cyber threats and communicate relevant intelligence to stakeholders across the cybersecurity enterprise.

Preferred Qualifications

• 5+ years experience performing Cyber Threat Intelligence analysis within a DoD, Intelligence Community, or federal cybersecurity environment.
• Strong understanding of nation-state and advanced persistent threat (APT) actors, malware analysis, and cyber threat reporting.
• Experience with threat intelligence platforms, SIEM technologies, detection engineering, and indicator management.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, STIX/TAXII, and common threat intelligence methodologies.
• Experience developing or validating detection signatures, YARA rules, Snort/Suricata signatures, or SIEM detection content is preferred.
• Excellent analytical, written, and verbal communication skills with experience producing executive and technical intelligence products.
• Active DoD Secret clearance with TS/SCI eligibility

At Indigo IT, we offer an expansive benefits package for our employees, which includes:

• Medical, Dental, and Vision coverage options.
• 401(k) with company match,
• Group life and disability,
• Flex Spending Accounts (FSA),
• Paid Time Off (PTO),
• Paid holidays,
• Education assistance.
• in house training programs for employees,
• bonuses
• recognition for publishing, speaking, and innovative thought leadership in our industry.

Indigo IT is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. This employer uses E-Verify.